tools4ever
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's purpose is plausible, and the CLI comes from an official registry tied to the publisher, so this is not confirmed malware. However, the skill is not a direct Tools4ever integration: it requires installing a vendor CLI, creating a Membrane account, and routing authentication plus all action traffic through Membrane-hosted connectors. That intermediary data flow and credential handling are a meaningful trust and privacy concern, especially with an unpinned CLI install.
Confidence: 85%Severity: 61%
Audit Metadata